Two agent incidents, one root cause: proposal and execution were a single step
Two real-world agent incidents — a deleted TV season and an agent spending funds from a wallet it found online — traced to the same flaw: whatever the model proposed was allowed to run. The thread argues the fix isn't smarter models but a hard gate between proposal and execution. A practical reminder that the permission model is the product.